refactor: move secrets off-shore
This commit is contained in:
parent
0ecc1cbf40
commit
d3d0ae8fcb
23 changed files with 231 additions and 179 deletions
|
|
@ -132,14 +132,6 @@
|
|||
};
|
||||
};
|
||||
|
||||
mkServiceSecret = name: service: {
|
||||
${name} = {
|
||||
file = "${self}/secrets/containers/${name}.age";
|
||||
owner = cfg.services.${service}.user.name;
|
||||
group = cfg.services.${service}.group.name;
|
||||
};
|
||||
};
|
||||
|
||||
mkNetworkService = name: _network:
|
||||
nameValuePair "podman-network-${name}" {
|
||||
description = "Podman network ${name} for ookflix";
|
||||
|
|
@ -151,5 +143,5 @@
|
|||
};
|
||||
};
|
||||
in {
|
||||
inherit mkServiceStateFile mkServiceSecret mkBasicServiceOptions mkServiceOptions mkServiceStateDir mkServiceUser mkUserOption mkPortOption mkGroupOption mkVolumeOption mkSubdomainOption mkNetworkService;
|
||||
inherit mkServiceStateFile mkBasicServiceOptions mkServiceOptions mkServiceStateDir mkServiceUser mkUserOption mkPortOption mkGroupOption mkVolumeOption mkSubdomainOption mkNetworkService;
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue